Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
File:                     U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json)
Hash identifier:          jvZsVAgEuCrKU8aCewJkJKRkTFpmClhQXfCA9xGjCqI=
Subject key identifier:   2C:73:5A:DB:43:F3:28:A3:93:06:FB:BE:90:D7:60:18:89:CB:84:42
Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
Certificate issuer:       /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Certificate serial:       0638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
Manifest number:          0624
Signing time:             Sat 28 Feb 2026 23:26:05 +0000
Manifest this update:     Sat 28 Feb 2026 23:26:05 +0000
Manifest next update:     Sat 07 Mar 2026 23:26:05 +0000
Files and hashes:         1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: XQSgGIeIQdNAchEKSMZv6qR+KiRrxC5pGOF3fIAYrrI=)
                          2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: 6APnLBehfOY43KiriNrCMYUfzprjv51sIyolcBkGjgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1EB, serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
        Validity
            Not Before: Feb 28 23:26:05 2026 GMT
            Not After : Mar  7 23:26:05 2026 GMT
        Subject: CN=69a3798d-2116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:fb:d4:e3:1a:4b:9e:cd:81:c4:1a:45:a0:
                    15:3d:fc:5b:de:bb:33:f3:5e:c9:e9:06:73:78:21:
                    64:91:22:42:1d:b2:ee:1c:26:b0:e7:b1:2f:6e:5d:
                    d1:ce:c8:f9:d2:ea:f1:fb:65:d5:dc:70:5c:7c:73:
                    7b:3b:9e:50:e6:fd:90:63:34:f7:62:cd:69:5b:8f:
                    44:00:26:a9:b8:f7:d6:cc:93:e1:92:81:2a:af:d8:
                    42:3a:15:b6:91:4b:da:06:31:9c:c3:18:25:08:72:
                    5e:99:e2:54:e7:d5:65:75:80:4b:02:d0:83:da:b8:
                    02:81:80:18:10:a0:3b:f8:67:38:5c:6d:ac:c3:4c:
                    3d:f7:c2:41:74:d5:41:00:40:2d:76:ea:2b:d7:83:
                    62:b1:0f:75:2c:3c:6c:c0:1d:33:cb:37:3a:68:cf:
                    a0:2a:8f:92:f3:e4:b8:ff:c1:49:69:4b:9c:9c:6a:
                    b5:45:ab:dd:b4:d4:f5:16:c8:bb:23:fe:49:6d:a7:
                    be:91:8a:17:86:58:33:6b:5a:a4:13:c8:35:d9:b8:
                    fc:a3:19:5e:9f:d0:f8:d5:80:60:af:95:61:90:9a:
                    72:25:46:f3:0c:dc:9e:11:42:3d:36:68:46:6f:96:
                    31:f1:86:6f:28:f1:c6:52:2c:77:31:ff:2f:0d:fe:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:73:5A:DB:43:F3:28:A3:93:06:FB:BE:90:D7:60:18:89:CB:84:42
            X509v3 Authority Key Identifier:
                keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:27:a0:06:8e:7d:31:51:a4:e4:00:d3:32:8d:20:b5:33:50:
         f3:6a:5e:0f:df:ed:20:83:7b:14:ec:d9:66:36:ad:a7:31:f2:
         f6:ef:2c:41:2a:3b:a2:9b:1a:a9:6c:e5:5a:1c:82:43:eb:be:
         1f:dc:f6:1e:f8:c7:83:b2:e3:eb:78:ec:1d:bc:41:97:74:94:
         75:9f:69:88:36:ca:df:17:01:83:2d:32:c9:30:9b:9a:f5:33:
         44:75:36:73:ab:e5:f7:ea:5d:06:e9:a6:48:20:32:9b:19:8d:
         04:1a:51:38:91:f0:dc:ca:00:a2:25:d5:41:3f:2a:ce:d6:ba:
         48:eb:8c:9f:8e:0f:ad:02:6b:8d:c9:1d:ac:35:c2:99:aa:43:
         10:a4:d5:3e:58:9a:87:03:27:26:1e:7a:52:3f:dd:6c:71:22:
         a0:2b:04:cd:f4:9d:1e:77:34:22:f4:9e:43:87:ff:50:ce:80:
         4f:8e:7c:18:fc:45:73:55:da:84:e9:03:7a:fb:b6:0e:8b:65:
         6f:79:55:e5:03:55:32:d3:c5:98:fc:77:07:d6:89:e1:34:21:
         88:ee:f6:1d:7a:27:7f:a1:16:10:38:de:14:3b:85:7e:e6:4c:
         9a:7c:da:87:39:cb:54:b9:3b:f8:bf:5a:4b:7f:28:72:d5:4d:
         5b:46:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:49 2026 by rpki-client